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July  9,  1999 

MEMORANDUM  FOR  ASSISTANT  SECRETARY  OF  THE  NAVY  (FINANCIAL 

MANAGEMENT  AND  COMPTROLLER) 


SUBJECT:  Audit  Report  on  Year  2000  Status  of  the  Combat  Control  System  Mark  2 
Block  1  A/B  (Report  No.  99-204) 


We  are  providing  this  report  for  review  and  comment.  We  considered 
management  comments  on  a  draft  of  this  report  in  preparing  the  final  report. 
Accordingly,  one  recommendation  was  deleted  and  the  other  was  revised.  We 
conducted  &e  audit  in  response  to  the  requirement  in  both  the  National  Defense 
Authorization  Act  and  the  DoD  Appropriations  Act  for  FY  1999. 

DoD  Directive  7650.3  requires  that  all  recommendations  be  resolved  promptly. 
Therefore,  we  request  that  the  Chief  Information  Officer,  Navy,  provide  comments  on 
the  revised  recommendation  by  July  30,  1999. 

We  appreciate  the  courtesies  extended  to  the  audit  staff.  For  additional 
information  on  this  report,  please  contact  Ms.  Kathryn  M.  Truex  at  (703)  604-9045 
(DSN  664-9045)  (kmtruex@dodig.osd.mil)  or  Ms.  Virginia  G.  Rogers  at 
(703)  604-9041  (DSN  664-9041)  (vrogers@dodig.osd.mil).  See  Appendix  B  for  the 
report  distribution.  The  audit  team  members  are  listed  inside  the  back  cover. 


Robert  J.  Lieberman 
Assistant  Inspector  General 
for  Auditing 
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Report  No.  99-204 

(Project  No.  9AS-0090.01) 

Year  2000  Status  of  the 
Combat  Control  System  Mark  2  Block  1  A/B 


Executive  Summary 


Introduction.  This  is  one  in  a  series  of  reports  being  issued  by  the  Inspector  General, 
DoD,  in  accordance  with  an  informal  partnership  widi  the  Chief  Information  Officer, 
DoD,  to  monitor  DoD  efforts  to  address  the  year  2000  computing  challenge.  In 
addition,  the  National  Defense  Authorization  Act  and  DoD  Appropriations  Act  for 
FY  1999  require  the  Inspector  General,  DoD,  to  selectively  audit  information 
technology  and  national  security  systems  certified  as  year  2000  compliant  to  evaluate 
the  ability  of  systems  to  successfully  operate  during  the  actual  year  2000,  including  the 
ability  of  the  systems  to  access  and  transmit  information  from  point  of  origin  to  point  of 
termination. 

The  Combat  Control  System  Mark  2  Block  1  A/B  provides  the  primary  means  for 
weapon  control,  contact  motion  analysis,  and  sensor  data  management  residing  on  a 
Ship  Submarine  Nuclear  6881  platform.  The  Combat  Control  System  Mark  2 
Block  1  A/B  provides  improved  performance  in  Strike  Warfare,  enhanced  Battle  Group 
interoperability,  and  increased  effectiveness  of  the  shallow  water  anti-submarine 
warfare.  It  supports  operational  requirements  for  improvement  of  navigational 
capability  of  the  Conventional  Tomahawk  Land  Attack  Missile,  the  Advanced 
Tomahawk  Weapon  Control  System,  the  Joint  Maritime  Command  Information  System, 
and  the  Mark  48  Advanced  Capability  Torpedo  Propulsion  Upgrade. 

Objectives.  Our  objective  was  to  evaluate  the  ability  of  the  Combat  Control  System 
Mark  2  Block  1  A/B  to  operate  successfully  in  the  year  2000,  including  the  ability  of 
the  system  to  access  and  transmit  information  from  point  of  origin  to  point  of 
termination.  Additionally,  the  audit  was  to  determine  whether  an  adequate  contingency 
plan  existed  to  ensure  continuity  of  operations. 

Results.  The  Naval  Sea  Systems  Command  certified  the  Combat  Control  System 
Mark  2  Block  1  A/B  as  year  2000  compliant  in  October  1997,  using  criteria  that  were 
subsequently  superceded.  As  a  result,  system  level  testing  was  still  ineomplete  when 
the  Combat  Control  System  Mark  2  Block  1  A/B  was  reported  as  compliant  in  the  DoD 
year  2000  database.  Additional  testing  was  performed  after  certifieation.  Although  the 
additional  testing  was  sufficient  to  alleviate  concerns  about  this  particular  system,  the 
methodology  used  for  its  certification  raises  concerns  that  127  other  Naval  Sea  Systems 
Command  systems  certified  as  of  September  1998  may  have  been  prematurely  and 
inappropriately  certified.  See  the  Finding  for  details  of  the  audit  results. 


Summary  of  Recommendations.  We  recommend  that  the  Chief  Information  Officer, 
Navy,  review  the  adequacy  of  system  level  testing  as  a  prudent  risk  mitigation  step  for 
the  other  Naval  Sea  Systems  Command  mission-critical  systems  certified  as  of 
September  1998,  other  than  the  Combat  Control  System  Mark  2  Block  1  A/B. 

Management  Comments.  The  Chief  Information  Officer,  Navy,  nonconcurred  with 
the  draft  recommendation  and  stated  that  recertification  was  not  necessary  for  the  other 
Naval  Sea  Systems  Command  mission-critical  systems  certified  as  of  September  1998 
based  on  the  extensive  testing  performed  by  the  Naval  Sea  Systems  Command.  A 
discussion  of  the  management  comments  is  in  the  Finding  section  of  the  report,  and  the 
complete  text  is  in  the  Management  Comments  section. 

Audit  Response.  We  concluded  that  the  testing  of  the  Combat  Control  System  Mark  2 
Block  1  A/B  performed  as  of  April  1999  appeared  adequate  to  justify  its  classification 
as  year  2000  compliant  now.  This  does  not  change  the  fact  that  compliance 
certification  was  made  in  October  1997  before  system  level  testing  was  completed. 
Comments  from  the  Chief  Information  Officer,  Navy,  on  whether  recertification  is 
necessary  for  the  other  Naval  Sea  Systems  Command  mission-critical  systems  certified 
as  of  September  1998,  were  nonresponsive.  The  Navy  has  inadequate  assurance  that 
other  Naval  Sea  Systems  Command  project  managers  completed  sufficient  system  level 
testing,  before  or  after  their  systems  were  certified.  The  inclusion  of  systems  in  higher 
level  testing  is  not  a  substitute  for  rigorous  system  level  testing.  Accordingly,  the  Navy 
needs  to  take  prudent  action  to  minimize  risk  by  double  checking  whether  adequate 
system  certification  testing  occurred  to  ensure  compliance  of  the  127  other  Naval  Sea 
Systems  Command  mission-critical  systems. 

We  request  that  the  Chief  Information  Officer,  Navy,  reconsider  his  position  and 
provide  comments  on  the  final  report  by  July  30,  1999. 


ii 


Table  of  Contents 


Executive  Summary  i 

Introduction 

Background  1 

Objectives  2 

Finding 

Year  2000  Status  of  the  Combat  Control  System  Mark  2  Block  1  A/B  3 

Appendixes 

A.  Audit  Process 

Scope  9 

Methodology  10 

Summary  of  Prior  Coverage  10 

B.  Report  Distribution  11 

Management  Comments 

Department  of  the  Navy  15 

Naval  Sea  Systems  Command  17 


The  National  Defense  Authorization  Act  and  DoD  Appropriations  Act  for 
FY  1999  requires  the  Inspector  General,  DoD,  to  selectively  audit  information 
technology  and  national  security  systems  certified  as  year  2000  (Y2K)  compliant 
to  evaluate  the  ability  of  systems  to  successfully  operate  during  the  actual  Y2K, 
including  the  ability  of  the  systems  to  access  and  transmit  information  from 
point  of  origin  to  point  of  termination. 


Background 


DoD  Year  2000  Management  Plan.  The  Assistant  Secretary  of  Defense 
(Command,  Control,  Communications,  and  Intelligence)  issued  the  “DoD  Year 
2000  Management  Plan”  (DoD  Management  Plan),  Version  1.0,  in  April  1997. 
The  Senior  Civilian  Official,  Office  of  the  Assistant  Secretary  of  Defense 
(Command,  Control,  Communications,  and  Intelligence),  in  his  role  as  the  DoD 
Chief  Information  Officer  issued  the  DoD  Management  Plan,  Version  2.0,  in 
December  1998.  The  DoD  Management  Plan  provides  the  overall  DoD  strategy 
and  guidance  for  inventorying,  prioritizing,  fixing,  testing,  and  implementing 
compliant  systems  and  monitoring  their  progress. 

Certification  Guidance.  The  DoD  Management  Plan  requires  system 
certification  as  an  exit  criterion  for  the  validation  phase.  According  to  the  DoD 
Management  Plan,  a  completed  and  signed  checklist  constitutes  certification  of 
Y2K  compliance  for  a  system.  The  Y2K  compliance  checklist,  in  the  appendix 
of  the  DoD  Management  Plan,  contains  questions  regarding  a  system’s  ability  to 
accurately  recognize  and  process  Y2K  dates,  including  the  leap  year;  usage  of 
dates  internally;  external  system  interfaces;  date  field  type,  Y2K  testing 
information;  and  commercial  off-the-shelf  products  and  Government  off-the- 
shelf  products. 

Testing  Guidance.  The  DoD  Management  Plan  requires  that  DoD 
Components  conduct  testing  to  validate  that  the  systems  are  Y2K  compliant  and 
perform  as  intended.  The  DoD  Management  Plan  requires  that  executive 
software  and  hardware  used  by  an  application  is  compliant  for  certification.  The 
DoD  Management  Plan  requires  all  interfaces  to  be  tested  and  certified  as  an 
exit  criterion  for  the  validation  phase.  Acceptance  testing  is  the  final  stage  of 
the  multiphase  testing  and  validation  process.  During  this  phase,  DoD 
Components  test  the  entire  information  system,  including  data  interfaces,  with 
operational  data.  The  DoD  Management  Plan  also  requires  DoD  Components  to 
analyze  all  code  to  determine  whether  it  handles  dates. 

Contingency  Plan  Guidance.  System  Y2K  contingency  plans  address  the 
technical  aspects  of  potential  disruptions  and  the  processes  and  procedures  for 
restoring  fimctionality  to  a  disrupted  system  that  is  believed  to  be  Y2K 
compliant.  The  sources  of  disruptions  may  include  the  following: 

•  interface  failures, 

•  transmission  or  receipt  of  corrupt  data, 
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•  utilities  or  other  infrastructure  elements  necessary  for  operations,  or 

•  other  items  that  could  result  in  a  Y2K-related  failure. 

The  DoD  Management  Plan  requires  that  contingency  plans  be  prepared  for  all 
mission-critical  systems.  All  contingency  plans  were  to  be  exercised  or 
validated  by  June  30,  1999,  to  ensure  that  alternate  procedures  were  realistic 
and  executable,  and  should  be  reviewed  regularly  and  modified,  if  required. 

Navy  Y2K  Action  Plan.  The  Department  of  the  Navy  Year  2000  Action  Plan, 
Version  1.4,  September  1998,  (Navy  Y2K  Action  Plan)  provides  guidance  for 
planning  and  implementing  all  information  technology,  software,  and  systems  in 
the  Department  of  the  Navy.  The  Navy  Y2K  Action  Plan  describes  the  Navy’s 
implementation  of  the  DoD  Management  Plan.  Prior  to  September  1998, 
Department  of  Navy  Year  2000  guidance  was  contained  in  the  Department  of 
Navy,  Chief  Information  Officer,  Guidance  and  Policy  Paper  No.  001-97, 
August  29,  1997. 

Certification  Guidance.  The  Navy  Y2K  Action  Plan  requires  Navy 
commands  or  organizations  use  the  DoD  compliance  checklist  to  ensure  Y2K 
compliance  of  all  its  systems.  However,  if  a  Navy  command  or  organization 
adopts  a  compliance  checklist  that  is  substantively  different  from  the  DoD 
compliance  checklist,  the  command  or  organization  must  obtain  Department  of 
Navy,  Chief  Information  Officer,  approval  for  that  checklist. 

Combat  Control  Systems.  The  Combat  Control  System  Mark  2  Block  1  A/B 
(CCS  MK2)  provides  the  primary  means  for  weapon  control,  contact  motion 
analysis,  and  sensor  data  residing  on  a  Ship  Submarine  Nuclear  6881  platform. 
The  Naval  Sea  Systems  Command  (NAVSEA)  is  the  system  manager,  and  the 
Naval  Undersea  Warfare  Center  Division  ^UWC)  in  Newport,  Rhode  Island, 
is  the  technical  agent.  For  CCS  MK2  to  direct  and  control  weapons,  the  system 
performs  target  motion  analysis,  weapon  and  attack  controls,  ballistic  data 
determination,  and  initiation  of  weapon-firing  sequences.  The  system  supports 
the  operational  requirements  to  improve  the  navigational  capability  of  the 
Conventional  Tomahawk  Land  Attack  Missile,  the  Advanced  Tomahawk 
Weapon  Control  System,  the  Joint  Maritime  Command  Information  System,  and 
the  Mark  48  Advanced  Capability  Torpedo  Propulsion  Upgrade. 

The  CCS  MK2  is  1  of  156  NAVSEA  mission-critical  systems  reported  in  the 
DoD  Y2K  database.  The  Navy  reported  128  of  the  156  NAVSEA 
mission-critical  systems  as  compliant  as  of  September  1998. 


Objectives 

Our  objective  was  to  evaluate  the  ability  of  CCS  MK2  to  operate  successfully  in 
the  year  2000,  including  its  ability  to  access  and  transmit  information  from  point 
of  origin  to  point  of  termination.  Additionally,  the  audit  was  to  determine 
whether  an  adequate  contingency  plan  existed  to  ensure  continuity  of  operations. 
See  Appendix  A  for  a  discussion  of  the  audit  scope  and  methodology. 
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Year  2000  Status  of  the  Combat  Control 
System  Mark  2  Block  1  A/B 

NAVSEA  certified  CCS  MK2  as  Y2K  compliant  on  October  31,  1997, 
using  criteria  that  have  now  been  superceded.  NAVSEA  did  not  have 
documentation  to  support  that  the  following  steps  took  place  before 
system  certification: 

•  confirming  that  the  system  was  Y2K  compliant  through  date  testing, 

•  determining  that  the  system  software  and  hardware  were  Y2K 
compliant,  and 

•  testing  and  certifying  all  system  interfaces  as  Y2K  compliant. 

The  NAVSEA  checklist  differed  substantially  from  the  DoD 
Management  Plan  checklist  and  did  not  comply  with  the  Navy  Y2K 
Action  Plan. 

As  a  result,  system  level  testing  was  still  incomplete  when  CCS  MBv2 
was  reported  as  compliant  in  the  DoD  Y2K  database.  Additional  testing 
was  performed  after  certification.  Since  the  testing  appears  to  be 
adequate,  the  Y2K  compliance  status  of  the  CCS  MK2  is  no  longer  at 
issue.  Although  the  addtional  testing  was  sufficient  to  alleviate  concerns 
about  this  particular  system,  the  methodology  used  for  its  certification 
raises  concerns  that  127  other  NAVSEA  systems  certified  as  of 
September  1998  may  also  have  been  prematurely  and  inappropriately 
certified  as  Y2K  compliant.  Whereas  the  audit  verified  that  additional 
system  level  testing  was  conducted  for  the  CCS  MK2,  there  is  no 
assurance  that  sufficient  testing  has  been  performed  on  the  other 
127  systems. 


JSystem  Certification 


NAVSEA  certified  CCS  MK2  as  Y2K  compliant  on  October  31,  1997,  using  the 
checklist,  “NAVSEA  Y2K  System  Certification  Format.  ”  According  to  the 
DoD  Management  Plan,  a  completed  and  signed  checklist  constitutes 
certification  of  Y2K  compliance  for  a  system.  The  NAVSEA  guidance  on  Y2K 
computer  systems  compliance,  dated  September  2,  1997,  requires  program 
managers  and  systems  managers  to  certify  their  systems  using  the  checklist, 
“NAVSEA  Y2K  System  Certification  Format.” 

The  signed  certification  checklist  differed  substantially  from  the  DoD 
Management  Plan  Y2K  compliance  checklist.  NAVSEA  authorized  its  program 
offices  to  use  the  one-page  checklist  despite  the  guidance  in  the  September  1998 
Navy  Y2K  Action  Plan  Aat  requires  a  Navy  command  or  organization  to  revise 
its  checklist  accordingly  if  it  adopts  a  compliance  checklist  with  substantive 
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differences  from  the  DoD  Y2K  compliance  checklist.  The  checklist  completed 
for  the  system  differed  substantially  from  that  of  the  DoD  Management  Plan, 

Because  the  DoD  Management  Plan  Y2K  compliance  checklist  covers  many 
more  Y2K  items  to  be  reviewed  than  does  the  NAVSEA  checklist,  it  is  much 
more  useful  for  ensuring  the  Y2K  compliance  of  the  system. 

In  addition  to  the  checklist,  the  CCS  MK2  system  program  manager  signed  the 
“NAVSEA  Y2K  System  Certification  Verification”  on  December  3,  1998.  The 
one-page  document  is  not  a  checklist  but  indicates  the  level  of  certification  for 
CCS  MK2. 


Date  Testing  Documentation 


Although  it  appears  that  NUWC  adequately  tested  CCS  MK2,  NAVSEA  did  not 
provide  documentation  supporting  that  it  performed  the  date  testing  before  the 
October  31,  1997,  certification.  The  DoD  Management  Plan  requires  complete 
system  testing  as  a  minimum  criterion  for  exiting  the  validation  phase  and 
certifying  a  system  as  Y2K  compliant.  The  test  plan  was  dated  November  6, 
1998,  and  the  test  results  were  dated  January  29,  1999.  Because  the  test  results 
for  CCS  MK2  did  not  state  when  the  tests  were  conducted,  the  documentation 
does  not  support  that  the  date  testing  took  place  before  the  system  was  certified. 

Individuals  within  NUWC  but  independent  of  CCS  MK2  performed  the  system 
date  testing.  The  program  manager  for  the  system  reviewed  the  test  results. 
NUWC  tested  the  system  twice  in  a  laboratory  and  once  on  a  ship.  The  system, 
including  external  data  interfaces,  was  tested  with  operational  data,  but  some 
interfaces  used  simulated  data.  The  testing  included  rolling  the  clocks  forward 
to  test  the  system  functioning  at  a  number  of  critical  dates.  The  review  by  a 
computer  system  engineer  for  the  Inspector  General,  DoD,  determined  that  the 
system’s  date  testing  appeared  to  have  been  adequate. 


System  Software  and  Hardware  Documentation 


Before  certifying  CCS  MK2  on  October  31,  1997,  NAVSEA  did  not  obtain 
vendor  certifications  or  individually  test  hardware  and  software  to  determine 
Y2K  compliance.  According  to  the  DoD  Management  Plan,  executive  software 
and  computer  hardware  used  by  an  application  must  be  compliant  for 
certification.  Additionally,  the  process  that  NAVSEA  used  for  certifying 
CCS  MK2  was  done  in  reverse  order.  System  testing  was  conducted  before  the 
major  hardware  and  software  components  were  reviewed.  The  CCS  MK2 
program  manager  obtained  the  test  results  for  the  main  processor, 
AN/UYK-43A,  at  the  request  of  auditors  in  March  1999.  The  test  results  were 
dated  May  1998,  which  was  7  months  after  the  NAVSEA  certified  CCS  MK2. 
Additionally,  the  CCS  MK2  program  manager  obtained  the  test  results  for  the 
operating  system,  at  the  request  of  auditors,  in  March  1999.  The  test  results  for 
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the  operating  system  were  dated  November  1998.  NAVSEA  did  not  provide  a 
vendor  certification  or  test  results  for  individually  testing  the  Generic  Front  End 
Communications  Processor.  NAVSEA  did  provide  documentation  dated 
July  1998  supporting  a  renovation  of  the  Generic  Front  End  Communications 
Processor  to  correct  a  Y2K  problem.  NAVSEA  did  not  determine  whether  the 
four  processor  subsystems  belonging  to  the  CCS  MK2  System  (the  Weapon 
Launch  Controller,  the  Common  Display  Console,  the  Data  Transfer  System, 
and  the  Tactical  Weapon  Simulator)  performed  date-related  processing  until  a 
computer  system  engineer  requested  information  for  the  Inspector  General, 
DoD,  in  April  1999. 

NAVSEA  also  did  not  review  the  system  code  to  identify  any  date  data,  as 
required  by  the  DoD  Management  Plan.  NAVSEA  stated  that  the  design 
documents  were  reviewed  instead  and  were  an  adequate  substitute  for  code 
review. 


Interface  Testing 


NAVSEA  did  not  provide  documentation  to  support  that  the  Navy  tested  and 
certified  all  system  interfaces  as  Y2K  compliant  before  certifying  CCS  MK2. 

The  DoD  Management  Plan  requires  that  all  system  interfaces  be  tested  and 
certified  before  exiting  the  validation  phase  and  certifying  a  system  as  Y2K 
compliant.  The  NAVSEA  checklist,  signed  October  31,  1997,  for  CCS  MK2 
indicated  that  each  interface  that  exchanged  data  had  been  reviewed,  corrected  if 
necessary,  and  verified  to  work  for  date  data  passed  between  systems. 

However,  the  November  1998  NUWC  test  plan  reflected  Y2K  problems  with 
the  Joint  Maritime  Command  Information  System,  the  Submarine  Fleet  Mission 
Program  Library,  and  the  Advanced  Tomahawk  Weapon  Control  System,  which 
are  interfacing  systems  to  CCS  MK2.  Further,  the  test  plan  stated  that 
renovations  to  these  systems  were  ongoing  when  the  plan  was  issued,  and  testing 
was  to  be  conducted  as  the  renovated  systems  became  available.  The 
January  29,  1999,  NUWC  test  report  indicated  that  the  CCS  MK2  interfaces 
were  tested  and  that  they  performed  satisfactorily. 


Contingency  Plans 


In  response  to  the  Navy  Y2K  Action  Plan,  September  1998,  and  Navy  Y2K 
contingency  plan  guidance  of  November  1998,  NAVSEA  prepared  a  system 
contingency  plan  for  its  combat  systems  that  was  initially  dated 
December  18,  1998.  The  contingency  plan  did  not  address  Y2K  scenarios  for 
specific  components  of  the  system,  such  as  the  main  processor  and  local  area 
networks.  The  contingency  plan  did  include  three  Y2K  scenarios  for  the 
Generic  Front  End  Communications  Processor  which,  according  to  the  system 
diagram,  is  different  from  the  main  processor,  AN/UYK-43A.  However, 
according  to  NAVSEA,  the  detailed  procedures  for  restoring  ftinctionality  to 
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disrupted  system  components  are  contained  in  the  technical  manuals  for  the 
CCS  MK2. 

The  DoD  Management  Plan  states  that  unless  system  contingency  plans  have 
been  updated  to  include  Y2K  contingencies,  they  should  not  be  considered 
adequate  because  they  may  not  be  effective  when  responding  to  a  Y2K-related 
disruption.  The  NAVSEA  had  existing  technical  manuals  providing  specific 
step-by-step  procedures  to  follow  in  the  event  of  a  system  disruption.  Should 
operators  of  the  CCS  MK2  encounter  an  operational  problem,  they  are  required 
to  first  treat  it  as  a  non-Y2K  problem  and  use  normal  operational 
troubleshooting  procedures  before  referring  to  the  Y2K  contingency  plan.  Navy 
personnel  held  that  contingency  plans  are  to  assist  the  Afloat  and  Ashore 
operators  to  complete  their  continuity-of-operations  plan. 

During  the  audit,  NAVSEA  updated  the  December  1998  CCS  MK2  contingency 
plan.  The  NAVSEA  added  and  revised  the  described  procedures  to  address 
Y2K  scenarios  in  the  March  17,  1999,  update.  Further,  NAVSEA  added 
references  to  external  interface  contingency  plans  and  provided  procedures  for 
external  interfaces  in  the  event  of  a  Y2K  failure.  The  contingency  plan 
considers  the  impact  on  performance  if  individual  system  clocks  are  not 
synchronized  with  real  time. 


Conclusion 

NAVSEA  certified  CCS  MK2  as  Y2K  compliant  on  October  31 ,  1997,  using 
criteria  that  have  now  been  superceded.  Although  NUWC  later  performed  date 
testing  on  the  CCS  MK2  and  it  appeared  to  be  adequate,  the  testing  occurred 
after  die  system  was  certified  as  compliant.  Additionally,  the  CCS  MK2 
program  manager  did  not  obtain  the  test  results  from  individually  testing  the 
hardware  and  software  of  CCS  MK2  until  March  1999.  The  NAVSEA  test 
plan,  dated  November  6,  1998,  also  indicated  that  three  interfacing  systems 
needed  renovation.  Additionally,  NAVSEA  completed  a  Y2K  compliance 
checklist  that  differed  substantially  from  and  was  not  as  thorough  as  the  DoD 
Management  Plan  Y2K  compliance  checklist  and  did  not  comply  with  the  Navy 
Y2K  Action  Plan.  As  a  result,  the  system  was  prematurely  reported  as 
compliant  in  the  DoD  Y2K  database,  although  additional  testing  done  after  the 
certification  appears  adequate  and  the  Y2K  compliance  status  of  the  CCS  MK2 
therefore  is  no  longer  at  issue.  The  lack  of  documentation  to  support  the 
CCS  MK2  certification  raises  concerns  that  127  other  NAVSEA  systems 
certified  as  of  September  1998  may  also  have  been  prematurely  and 
inappropriately  certified  as  Y2K  compliant.  Whereas  the  audit  verified  that 
additional  system  level  testing  was  conducted  for  the  CCS  MK2,  there  is  no 
assurance  tihat  sufficient  testing  has  been  performed  on  the  other  127  systems. 
The  inclusion  of  systems  in  higher  level  testing  is  not  an  acceptable  substitute 
for  rigorous  system  level  testing.  We  do  not  agree  that  the  certification  status  of 
these  systems,  specifically  the  sufficiency  of  system  level  testing,  has  been 
reviewed  at  any  time  since  certification  by  the  Navy. 
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Recommendations,  Management  Comments,  and  Audit 
Response 


Deleted,  Revised  and  Renumbered  Recommendations.  As  a  result  of  the 
management  comments,  we  deleted  draft  Recommendation  1.  because  we  agree 
that  the  system  certification  testing  of  the  Combat  Control  System  Mark  2 
Block  1  A/B  performed  as  of  April  1999  appeared  adequate,  although  the  testing 
occurred  after  October  31,  1997.  Our  concerns  pertaining  to  the  overall  Naval 
Sea  Systems  Command  systems  certification  process  prior  to  September  1998  is 
addressed  in  the  remaining  recommendation  and  audit  response.  We  revised  the 
remaining  recommendation  in  recognition  that  higher  level  tests  are  already 
ongoing. 

We  recommend  that  the  Chief  Information  Officer,  Navy,  review  the 
adequacy  of  system  level  testing  as  a  prudent  risk  mitigation  step  for  the 
other  Naval  Sea  Systems  Command  mission-critical  systems  that  were 
certified  as  of  September  1998,  other  than  the  Combat  Control  System 
Mark  2  Block  1  A/B, 

Navy  Comments.  The  Chief  Information  Officer,  Navy,  nonconcured  with  the 
draft  recommendation,  which  was  to  determine  if  recertification  was  necessary. 
He  stated  that  recertification  was  not  necessary  for  the  other  mission-critical 
systems  certified  as  of  September  1998  because  of  the  extensive  testing 
performed  by  NAVSEA. 

Audit  Response.  We  consider  the  comments  of  the  Chief  Information  Officer, 
Navy,  to  be  nonresponsive.  We  agree  that  the  testing  of  CCS  MK2  performed 
as  of  April  1999  appeared  adequate.  However,  the  testing  was  performed  after 
the  October  31,  1997,  certification.  The  issue  raised  in  this  report  is  whether 
the  system  level  testing  for  all  other  NAVSEA  systems,  whether  performed 
before  or  after  certification,  was  adequate.  To  focus  attention  on  that  issue,  and 
not  on  the  formalities  of  certification,  we  have  reworded  the  recommendation. 

Contrary  to  the  stated  position  of  NAVSEA,  the  DoD  Management  Plan 
requires  executive  software  and  hardware  used  by  an  application  to  be  compliant 
for  certification  and  suggests  obtaining  vendor  certifications  from  the  internet  or 
individual  testing.  NAVSEA  agreed  fiiat  the  Y2K  certifications  of  individual 
hardware  and  software  were  not  obtained  before  the  system  was  certified,  and 
that  individual  component  testing  was  not  done  because  an  integrated  test  was 
considered  sufficient.  We  maintain  that  there  exists  an  additional  risk  if  the 
individual  components  are  not  tested  individually  in  conjxmction  with  the 
application  testing.  We  do  not  believe  that  individual  component  testing  should 
be  performed  instead  of  an  integrated  test. 

Further,  we  maintain  that  the  checklist  used  to  certify  the  system  contained 
substantive  differences  from  the  DoD  Management  Plan  Y2K  Compliance 
Checklist,  which  covers  more  Y2K  compliance  issues  than  the  NAVSEA 
checklist.  The  NAVSEA  checklist  does  not  include  questions  on  crossing 
FY  2000  successfully,  indirect  date  usage,  usage  of  dates  internally, 
communicating  with  fee  responsible  organization  regarding  each  interface,  date 
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field  type,  testing  information,  and  commercial  and  Government  off-the-shelf 
products  included  in  the  DoD  Management  Plan  Y2K  Compliance  Checklist. 

Primary  Y2K  assurance  is  derived  from  individual  system  certification  tests, 
which  serve  as  a  foundation  for  higher  level  tests.  Accordingly,  the  Navy  needs 
to  determine  whether  adequate  system  certification  testing  occurred  for  the  other 
127  NAVSEA  mission-critical  systems,  regardless  of  when  it  occurred. 

We  ask  the  Navy  to  reconsider  its  position  on  the  revised  Recommendation. 
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Appendix  A.  Audit  Process 


This  report  is  one  in  a  series  being  issued  by  the  Inspector  General,  DoD,  in 
accordance  with  an  informal  partnership  with  the  Chief  Information  Officer, 
DoD,  to  monitor  DoD  efforts  to  address  the  Y2K  computing  challenge.  For  a 
list  of  audit  projects  addressing  the  issue,  see  the  Y2K  webpage  on  Ignet  at 
http://www.IGnet.gov. 


Scope 

We  obtained  documentation  to  support  the  testing  and  certification  of 
CCS  MK2.  The  Technical  Assessment  Division,  Office  of  the  Inspector 
General,  DoD,  reviewed  the  test  plan  and  test  results  to  determine  whether  CCS 
MK2  had  been  adequately  tested.  We  compared  the  Y2K  efforts  of  certifying 
and  testing  CCS  MK2  with  the  requirements  in  the  DoD  Management  Plan. 
Additionally,  we  reviewed  the  testing  and  certification  requirements  in  the  Navy 
Y2K  Action  Plan  dated  September  1998  and  the  NAVSEA  guidance  dated 
September  1997.  We  also  reviewed  the  CCS  MK2  contingency  plan  and 
compared  it  with  the  system-level  contingency  plan  requirements  in  the  DoD 
Management  Plan. 

DoD-Wide  Corporate-Level  Government  Performance  and  Results  Act 
Goals.  In  response  to  the  Government  Performance  and  Results  Act,  the 
Department  of  Defense  established  6  DoD-wide  corporate-level  performance 
objectives  and  14  goals  for  meeting  the  objectives.  This  report  pertains  to 
achievement  of  the  following  objective  and  goal. 

Objective:  Prepare  now  for  the  uncertain  future.  Goal:  Pursue  a 
focused  modernization  effort  that  maintains  U.S.  qualitative  superiority 
in  key  warfighting  capabilities.  (DoD-3) 

DoD  Functional  Area  Reform  Goals.  Most  major  DoD  functional  areas  have 
also  established  performance  improvement  reform  objectives  and  goals.  This 
report  pertains  to  achievement  of  the  following  functional  area  objectives  and 
goals. 

Information  Technology  Management  Functional  Area. 

•  Objective:  Become  a  mission  partner.  Goal:  Serve  mission 
information  users  as  customers.  (ITM-1.2) 

•  Objective:  Provide  services  that  satisfy  customer  information  needs. 
Goal:  Modernize  and  integrate  DoD  information  infrastructure. 
aTM-2.2) 

•  Objective:  Provide  services  that  satisfy  customer  information  needs. 
Goal:  Upgrade  technology  base.  (ITM-2.3) 
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General  Accounting  Office  High-Risk  Area.  The  General  Accounting  Office 
has  identified  several  high-risk  areas  in  DoD.  This  report  provides  coverage  of 
the  Information  Management  and  Technology  high-risk  area. 


Methodology 

Use  of  Computer-Processed  Data.  We  did  not  use  computer-processed  data  to 
perform  the  audit. 

Audit  Type,  Dates,  and  Standards.  We  performed  this  program  audit  from 
January  through  April  1999,  in  accordance  with  auditing  standards  issued  by  the 
Comptroller  General  of  the  United  States,  as  implemented  by  the  Inspector 
General,  DoD. 

Contacts  During  the  Audit.  We  visited  or  contacted  individuals  and 
organizations  within  DoD.  Further  details  are  available  upon  request. 

Management  Control  Program.  We  did  not  review  the  management  control 
program  related  to  the  overall  audit  objective  because  DoD  recognized  the  Y2K 
issue  as  a  material  management  control  weakness  area  in  the  FY  1998  Annual 
Statement  of  Assurance. 


Summary  of  Prior  Coverage 

The  General  Accounting  Office  and  the  Inspector  General,  DoD,  have 
conducted  multiple  reviews  related  to  Y2K  issues.  General  Accounting  Office 
reports  can  be  accessed  over  the  Internet  at  http://www.gao.gov.  Inspector 
General,  DoD,  reports  can  be  accessed  at  http://www.dodig.osd.mil. 
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Appendix  B.  Report  Distribution 


Office  of  the  Secretary  of  Defense 

Under  Secretary  of  Defense  for  Acquisition  and  Technology 
Director,  Defense  Logistics  Studies  Information  Exchange 
Under  Secretary  of  Defense  (Comptroller) 

Deputy  Chief  Financial  Officer 
Deputy  Comptroller  (Program/Budget) 

Assistant  Secretary  of  Defense  (Command,  Control,  Communications,  and  Intelligence) 
Deputy  Assistant  Secretary  of  Defense  (Command,  Control,  Communications, 
Intelligence) 

Deputy  Chief  Information  Officer  and  Deputy  Assistant  Secretary  of  Defense  (Chief 
Information  Officer  Policy  and  Implementation) 

Principal  Director  for  the  Year  2000 


Joint  Staff 

Director,  Joint  Staff 


Department  of  the  Army 

Assistant  Secretary  of  the  Army  (Financial  Management  and  Comptroller) 
Chief  Information  Officer,  Army 
Inspector  General,  Department  of  the  Army 
Auditor  General,  Department  of  the  Army 


Department  of  the  Navy 

Assistant  Secretary  of  the  Navy  (Financial  Management  and  Comptroller) 

Chief  Information  Officer,  Navy 

Commander,  Naval  Sea  Systems  Command 

Inspector  General,  Department  of  the  Navy 

Auditor  General,  Department  of  the  Navy 

Inspector  General,  Marine  Corps 
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Department  of  the  Air  Force 

Assistant  Secretary  of  the  Air  Force  (Financial  Management  and  Comptroller) 
Chief  Information  Officer,  Air  Force 
Inspector  General,  Department  of  the  Air  Force 
Auditor  General,  Department  of  the  Air  Force 


Unified  Commands 

Commander  in  Chief,  U.S.  European  Command 
Commander  in  Chief,  U.S.  Pacific  Command 
Commander  in  Chief,  U.S.  Atlantic  Command 
Commander  in  Chief,  U.S.  Southern  Command 
Commander  in  Chief,  U.S.  Central  Command 

Other  Defense  Organizations 

Director,  Defense  Contract  Audit  Agency 
Director,  Defense  Information  Systems  Agency 

Chief  Information  Officer,  Defense  Information  Systems  Agency 
Inspector  General,  Defense  Information  Systems  Agency 
United  Kingdom  Liaison  Officer,  Defense  Information  Systems  Agency 
Director,  Defense  Logistics  Agency 
Director,  National  Security  Agency 

Inspector  General,  National  Security  Agency 
Inspector  General,  Defense  Intelligence  Agency 
Inspector  General,  National  Imagery  and  Mapping  Agency 
Inspector  General,  National  Reconnaissance  Office 

Non-Defense  Federal  Organizations  and  Individuals 

Chief  Information  Officer,  General  Services  Administration 
Office  of  Management  and  Budget 

Office  of  Information  and  Regulatory  Affairs 
General  Accounting  Office 

National  Security  and  International  Affairs  Division 
Technical  Information  Center 

Director,  Defense  Information  and  Financial  Management  Systems,  Accounting  and 
Information  Management  Division 
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Congressional  Committees  and  Subcommittees,  Chairman  and 
Ranking  Minority  Member 

Senate  Committee  on  Appropriations 

Senate  Subcommittee  on  Defense,  Committee  on  Appropriations 

Senate  Committee  on  Armed  Services 

Senate  Committee  on  Governmental  Affairs 

Senate  Special  Committee  on  the  Year  2000  Technology  Problem 

House  Committee  on  Appropriations 

House  Subcommittee  on  Defense,  Committee  on  Appropriations 
House  Committee  on  Armed  Services 
House  Committee  on  Government  Reform 

House  Subcommittee  on  Government  Management,  Information,  and  Technology, 
Committee  on  Government  Reform 

House  Subcommittee  on  National  Security,  Veterans  Affairs,  and  International 
Relations,  Committee  on  Government  Reform 
House  Subcommittee  on  Technology,  Committee  on  Science 
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Department  of  the  Navy  Comments 


DEPARTMENT  OF  THE  NAVY 

OFFICE  OF  THE  CHIEF  INFORMATION  OFFICER 
1000  NAVY  PENTAGON 
WASHINGTON.  DC  30dS0*1 000 

14  1999 

MEMORANDOM  FOR  THE  DEPARTMENT  OF  DEFENSE  ASSISTANT  INSPECTOR 
GENERAL  FOR  AUDITING 

Subj:  DODIG  DRAFT  REPORT:  YEAR  2000  STATUS  OF  THE  COMBAT 

CONTROL  SYSTEM  MARK  2  BLOCK  1  A/B  (Report  No.  9AS-0090) 

Ref:  (a)  DODIG  memo  of  14  May  99 

Enel:  (1)  COMNAVSEASYSCOM  memo  7500  Ser  OON3B/199  of  4  Jun  99 

I  am  responding  to  the  draft  audit  report  forwarded  by 
reference  (a),  concerning  the  perceived  failure  of  the  Naval  Sea 
Systems  Command  (NAVSEA)  to  properly  certify  the  Combat  Control 
System  Mark  2  Block  1  A/B  (CCS  MK2) .  Enclosure  (1)  is  NAVSEA’ s 
response  to  the  recommendations  contained  in  reference  (a) . 

Based  on  the  facts  set  forth  in  enclosure  (1),  we  non¬ 
concur  with  Recommendation  1  of  reference  (a) .  We  believe 
adequate  documentation  existed  at  the  time  to  properly  certify 
the  CCS  MK  2  as  Y2K  compliant  on  31  October  1997.  Further,  in 
accordance  with  Recommendation  2  of  reference  (a) ,  and  based 
upon  our  knowledge  of  the  extensive  testing  performed  by  NAVSEA 
on  the  combat  systems  in  question,  we  have  determined  that 
recertification  is  not  necessary  for  the  other  mission-critical 
systems  certified  as  of  September  1998. 

As  NAVSEA  clearly  sets  forth  in  enclosure  (1),  it  has 
expended  countless  man-hours  in  careful,  well-documented  testing 
of  its  systems.  Additionally,  its  procedures  were  verified 
using  the  most  proven  testing  methodology  by  a  credible  testing 
source  over  a  considerable  period  of  time.  Careful  follow  up 
after  initial  certification  of  the  systems  failed  to  identify 
any  Y2K  problems.  This  confirms  our  finding  that  no 
recertification  is  necessary  in  this  case.  Part  of  the  problem 
in  this  case,  which  has  led  to  the  initial  confusion  about 
whether  the  CCS  MK  2  was  properly  certified  in  October  1997, 
arose  because  NAVSEA  was,  in  fact,  ahead  of  schedule  in  testing 
for  Y2K  problems.  Having  begun  their  testing  program  in  the 
context  of  scant  guidance  as  to  the  kind  of  certification 
required  under  DoD  guidelines,  they  sought  early  guidance  from 


Subj:  DODIG  DRAFT  REPORT:  YEAR  2000  STATUS  OF  THE  COMBAT 

CONTROL  SYSTEM  MARK  2  BLOCK  1  A/B  (Report  No.  9AS-0090) 

the  DON  CIO.  In  full  accordance  with  this  guidance,  NAVSEA 
properly  tested  their  systems.  Finally,  NAVSEA  systems  receive 
Flag  level  review  and  certification.  This  level  of  scrutiny 
reaffirms  the  adequacy  of  the  NAVSEA  certification  process  and 
the  CCS  MK2  Y2K  validation  status. 

My  point  of  contact  is  Captain  Cray  Coppins,  JAGC,  USNR, 
(703)  602-6799. 


uT  M.  Wennergren 
Deputy  for  Y2K  and 

Information  Assurance 


Copy  to: 

CNO 

UNSECNAV 
ASSTSECNAV  RDA 
Naval  Inspector  General 
Naval  Audit  Service 
OSN  Y2K  Project  Office 
NAVfNSGEN  (02) 
ASSTSECNAV  FMC  (FMO-31) 
COMNAVSEASYSCOM 
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Naval  Sea  Systems  Command  Comments 


DEPARTMENT  OF  THE  NAVY 

NAVAL  SEA  SYSTEMS  COMMANO 
2U1  JEFFERSON  DAVIS  HWV 
AMJNaTDNVA  222424(60 

7500 

Ser  OON3B/199 
4  June  1999 


MEMORANDUM  FOR  THE  DEPARTMENT  OF  THE  NAVY  CHIEF  INFORMATION 
OFFICER 

Subj:  DODIG  DRAFT  REPORT;  YEAR  2000  STATUS  OF  THE 
COMBAT  CONTROL  SYSTEM  MARK  2  BLOCK  lA/B 
(Report  No.  9AS-0090) 

Ref:  (a)  DODIG  Memo  of  14  May  1999 

End;  (1)  NAVSEA  comments  w/Attachments  A-C 

1 .  We  have  reviewed  the  findings  and  recommendations 
provided  by  reference  (a) .  Detailed  comments  are  provided 
by  enclosure  (1) . 

2.  We  non-concur  with  Recommendation  1,  and  the  conclusion 
that  NAVSEA  certified  the  Combat  Control  System  Mark  2  Block 
lA/B  as  Y2K  compliant  without  sufficient  documentation  to 
support  the  31  October  1997  certification.  Adequate 
documentation  did  exist,  as  of  31  October  1997,  to  support 
the  certification  of  the  system  in  accordance  with  the 
requirements  at  the  time.  Attachments  (A)  through  (C)  of 
enclosure  (1)  provide  additional  supporting  documentation. 


Copy  to: 

OAS  FMO-31  (Attn;  Mike  Tracht) 


HAVT  BESPONSS  TO 
OoDIS  DRAFT  AUDIT  REPORT  OH 
TEAR  2000  STATUS  OF  THE 
CCRIBAT  CONTROL  SYSTEM  MARX  2  BLOCK  lA/B 
PROJECT  HO.  9AS-0090.01  OF  14  MAT  1999 


X.  Ovarall  H&vy  CoBonant  on  tha  Draft;  Bapert 

The  report  concludes  that  the  NAVY  certified  CCS  MK2  BLK 

1  A/B  as  Y2K  compliant  without  having  sufficient  documentation 
to  support  the  October  31,  1997  certification.  The  test  plan 
was  dated  November  6,  1998  and  the  test  report  was  dated 
January  29,  1999.  The  DoDIG  concluded  that  the  CCS  MK  2  Block 
lA/B  was  prematurely  certified  and  recommended  that  the  CCS  MK 

2  Block  lA/B  be  re-certified. 

Testing  conducted  by  the  Technical  Direction  Agent  (TDA) , 
Naval  Undersea  Warfare  Center  (NUWC)  Division  Newport  prior  to 
certification  showed  that  all  requirements  for  certification 
were  satisfied.  Test  results  were  documented  in  various 
internal  test  logs  and  reports  at  NUWC,  in  briefings  presented 
to  the  Program  Manager  and  to  Commander,  Operational  Test  and 
Evaluation  Force  (COMOPTEVFOR) ,  in  a  brief  presented  by  an 
independent  Red  Team  reviewing  CCS  MK2  BLK  1  A/B  testing,  and 
in  the  COMOPTEVFOR  report  on  Follow-on  Operational  Testing 
(FOT4E)  of  CCS  MK2  BLK  1  A/B.  A  timeline  of  the  testing  and 
reports  on  test  results  for  CCS  MK2  BLK  1  A/B  is  included  as 
ATTACHMENT  A. 

The  6  November  1998  test  plan  and  29  January  1999  test 
report  cited  by  the  audit  report  were  consolidated  documents 
that  rolled  up  the  Y2K  testing  of  nine  submarine  combat 
systems.  Contemporaneous  notes  and  logs  that  existed  prior  to 
31  October  1997  were  not  provided  to  the  audit  team  because 
the  issue  of  the  timing  of  the  certification  relative  to  the 
dates  of  the  test  documents  was  not  raised  until  after  the 
audit  outbrief  and  after  the  last  meeting  with  audit 
personnel.  The  29  January  1999  consolidated  report  provided 
the  best  documentation  for  the  discussion  of  what  testing  was 
conducted,  and  was  used  in  discussions  with  the  audit  team. 

Additionally,  after  certification,  shipboard  testing  of  CCS 
MK2  BLK  1  A/B  and  five  other  submarine  combat  systems  managed 
by  the  same  program  office  and  TDA  have  not  identified  any  Y2K 
problems  in  submarine  combat  systems,  thus  reaffirming  that 
the  testing  methodology  was  adequate. 
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II.  Havy  datallad  raspona*  to  spaoifio  audit  aonmanta  in  tha 
conolualon  of  tha  raport 

Audit  coimnent  #1;  Page  9,  paragraph  1,  line  1-5,  7-9,  11,  13- 
14. 


NAVSEA  certified  CCS  MK2  as  Y2K  compliant  without  having 
sufficient  documentation  to  support  the  October  31,  1997  Y2K 
certification.  The  date  testing  on  the  CCS  MK2  appeared  to  be 
adequate,  albeit  late.  The  test  plan  was  dated  November  6, 

1998,  and  the  teat  results  were  dates  January  29,  1999. 
Dociunentatlon  was  lacking  because  NAVSEA  did  not  comply  with 
the  testing  and  certification  requirements  of  the  DoD 
Management  Plan.  As  a  result  the  system  was  prematurely 
reported  in  the  DoD  V2K  database  as  compliant...  NAVSEA  still 
has  not  demonstrated  that  the  system  fully  complies  with  the 
certification  requirements  of  the  DoD  management  plan. 

Navy  Response;  Non-Concur. 

The  CCS  Mk  2  Block  lA/B  Y2K  testing  was  conducted 
beginning  in  January  1997  prior  to  the  advent  of  any  formal 
NAVSEA  or  DOD  Y2K  guidance.  Specifically,  at  that  time,  there 
was  no  requirement  for  formal  Y2K  test  documentation.  Y2K 
test  plans  were  prepared  by  modifying  existing  operability 
test  plans.  NUWC  and  NAVSEA  worked  together  with  COMOPTEVFOR, 
NAVAIR  PMA282,  and  other  agencies  to  focus  on  Y2K  during 
developmental  and  operational  testing  of  CCS  Mk  2  BLK  lA/B  and 
external  interfaces.  NUWC  modified  its  standardized  test 
methodology  to  include  validation  of  Y2K  requirements  for  all 
fleet  products. 

The  system  was  certified  as  Y2K  compliant  based  on  the 
results  of  Y2K  testing  conducted  as  part  of  the  following 
tests  (see  Attachment  A) : 

*13-25  Jan  1997  300-hour  System  Design  Certification  Test 
(SDCT) . 

*6  April  1997  System  Operation  and  Reliability  Test 
(SORT) . 

The  results  from  these  tests  are  documented  in  CCS  MK  2 
Block  lA/B  test  logs  and  test  summary  reports.  Additionally, 
the  following  materials  described  results  of  Y2K  testing  (see 
Attachment  A) : 

‘Presentation  to  Program  Manager,  '•Operational  Test 
Readiness  Review"  dated  10  February  1997. 

♦Presentation  to  COMOPTEVFOR,  "CCS  MK2  Block  lA/B  RCI 
Year  2000  Test  Results"  dated  16  April  1997. 
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*CCS  MK2  BI.K  1  A/B  RCI  System  Certification  Red  Team 
Review  dated  30  June  1997. 

♦Presentation  to  Program  Manager,  "Follow-on  Operational 
Test  and  Evaluation  Brief"  dated  29  June  1997. 

♦Follow-on  Operational  Test  Report  for  CCS  MK2  BLK  lA/B, 
COMOPTEVFOR  Itr  3960  (234-lO-OT-III)  Ser  433/C045  20  Aug  97. 

Following  issuance  of  the  OoD  Y2K  Management  Plan  in 
April  1997  NAVSEA  issued  a  letter  in  September  1997  directing 
activities  to  document  YPK  certification  of  systems  using  the 
NAVSEA  Certification  form  (see  Attachment  B) .  Mr.  Frank 
Fowler,  who  was  the  NUWC  Lead  System  Engineer  for  CCS  MK2  BLK 
1  A/B  and  a  Test  Director  for  the  y2K  tests,  reviewed  test 
director  logs  and  results  compiled  during  the  test  and 
subsequent  analysis.  His  review  determined  that  all 
requirements  for  certification  had  been  met  except  for  testing 
of  31  December  2000.  A  team  consisting  of  Mr.  Fowler,  Mr. 

Guay  (NUWC),  and  Mr.  Parker  (INRI)  conducted  testing  of  31 
December  2000  in  October  1997,  and  Mr.  Fowler  signed  the 
certification  form  on  27  October  1997.  The  Program  Manager, 
PMS  425  signed  the  certification  on  31  October  1997  based  on 
the  signature  of  his  Technical  Direction  Agent  and  his  own 
ongoing  knowledge  of  the  test  program. 

Following  the  issuance  of  Y2K  policy,  and  specifically 
while  preparing  for  the  Flag/SES  level  review  of  Y2K 
certification,  NUWC  drafted  a  consolidated  test  plan  and  test 
report  to  summarize  Y2K  testing  for  all  Submarine  Combat 
Control  Systems  (9  different  configurations  of  FCS/CCS/BSYl) 
which  were  tested  and  certified  on  different  occasions.  CCS 
MK2  BLK  1  A/B  is  one  of  those  nine  systems.  The  Y2K  test 
report  was  signed  27  January  1999  and  printed  on  29  January 
1999. 


The  CCS  MK2  BLK  1  A/B  certification  was  reviewed  on  29 
January  1999  as  required  CNO  message  131717Z  JAN,  which 
directed  that  a  flag  officer  or  SES  review/recertify  all 
Mission  Critical  systems.  By  his  review  and  signature  the 
Deputy  Director,  Submarine  Directorate  (an  SES)  upheld  and 
reaffirmed  the  31  October  1997  certification  (see  Attachment 
C)  . 


Documentation  notwithstanding,  the  adequacy  of  CCS  MK  2 
Block  lA/B  date  testing  is  indicated  by  the  Audit  Report  which 
states  that  "The  review  by  a  computer  system  engineer  of  the 
Inspector  General,  DoD,  determined  that  the  system  date 
testing  seemed  to  have  been  adequate."  The  Y2K  methodology 
used  on  CCS  MK  2  BLK  lA/B  has  been  validated  in  numerous  Y2K 
tests.  Five  of  the  Combat  Systems  managed  by  the  PMS  425 
Program  Office  and  NUWC  Technical  Direction  Agent,  including 
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two  of  the  other  systems  covered  in  the  6  November  1998  test 
plan  and  the  29  January  1999  test  report  have  been  tested  on 
submarines  In  a  ship-wide  Y2K  operational  scenario.  One  of 
those  systems,  BSY-l,  completed  a  four  day  at-sea  Y2K  test  as 
part  of  the  Constellation  Battle  Group  System  Interoperability 
Test  (BGSIT)  in  March  1999.  CCS  MK2  BIK  1  A/B  along  with 
renovated  versions  of  three  interfacing  systems  (Submarine 
Fleet  Mission  Program  Library  (SFMPL) ,  Joint  Maritime  Command 
Information  System  (JMCIS)  and  Advanced  Tomahawk  Weapon 
Command  System  (ATWCS) ;  see  audit  comment  #3)  was  successfully 
tested  for  Y2K  compliance  onboard  USS  Alexandria  28-29 
December  1996.  In  all  of  these  tests;  no  Y2K  problems  were 
Identified  in  Submarine  Combat  Systems. 

Audit  comment  #2;  Page  9,  paragraph  1,  line  5. 

Test  results  from  individually  testing  the  hardware  and 
software  of  CCS  MK2  [Block  lA/B]  were  not  obtained  until  March 
1999. 

Navy  Response;  Partial  Concur. 

It  is  correct  that  the  Y2K  certification  of  individual 
hardware  and  software  was  not  obtained  prior  to  certification  of 
CCS  MK  2  Block  lA/B.  Certification  of  individual  components  is 
not  required  by  the  DoD  Management  Plan. 

The  DoD  Management  Plan  section  A. 4. 6  requires  that 
"executive  software/hardware  used  by  an  application  must  be 
compliant  for  certification"  as  an  exit  criteria  for  the 
Validation  phase.  All  software  including  executive  software 
and  hardware  of  the  CCS  MK2  BLK  1  A/B  was  included  in  Y2K 
testing.  There  is  no  requirement  that  this  testing  be  done 
Independently  of  other  testing.  The  Technical  Direction  Agent 
believes  that  an  integrated  test  with  all  components  of  the 
system  operating  together  is  a  more  valid  test  than 
independent  component  testing. 


Audit  comment  #3:  Page  9,  paragraph  1,  line  7. 

The  NAVSEA  test  plan  indicated  that  three  interfacing 
systems  needed  renovation. 

Navy  Response;  Partial-Concur . 

Page  9-2  of  the  test  report  incorrectly  states  that  three 
interfaces  were  not  tested.  These  three  interfaces  were 
actually  tested  during  the  13-25  January  1997  and  6  April  1997 
testing.  Workarounds  for  the  three  interfacing  systems  were 
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developed  and  tested  at  that  time.  These  workarounds  allowed 
CCS  MK2  BIiK  1  A/B  to  perform  Its  mission. 

During  the  January  1997  and  April  1997  Y2K  testing,  y2K 
problems  were  verified  for  three  external  interfacing  systems; 
ATWCS,  JMCIS  and  SFMPL.  These  y2K  problems  were  Inherent  In 
the  HP  UNIX  Operating  System  (0/S)  version  9.0.7  employed  by 
these  three  interfacing  systems. 

During  the  January  and  April  1997  Y2K  testing  workarounds 
for  these  three  systems  were  developed  and  tested  which 
allowed  CCS  MK2  BLK  1  A/B  to  perform  its  functions.  These 
workarounds  are  discussed  in  CCS  MK2  BLK  1  A/B  test  logs  and 
in  the  "CCS  MK2  BLK  1  A/B  Year  2000  Test  Results"  brief  to 
COMOPTEVFOR  of  16  April  1997 .  One  of  the  workarounds  is 
discussed  by  COMOPTEVFOR  in  the  Follow-on  Operational  Test 
Report  for  CCS  MK2  BLK  lA/B,  COMOPTEVFOR  Itr  3960  (234-10-OT- 
III)  Ser  433/C045  20  Aug  97  (page  4-4) . 

The  testing  showed  that  with  use  of  workarounds  in  the 
three  interfacing  systems,  CCS  MK2  BLK  1  A/B  could  perform  its 
mission  despite  the  Y2K  problems  in  the  interfacing  systems . 
This  result  addresses  the  worst-case  possibility:  if  the  three 
interfacing  systems  had  never  been  successfully  renovated  to 
be  y2K  compliant  CCS  MK2  BLK  1  A/B  would  still  be  able  to 
function.  Thus  the  certification  is  supported. 

On  28-29  December  98,  after  renovation  of  the  SFMPL, 

ATWCS  and  JMCIS  was  completed  and  renovated  versions  had  been 
installed  onboard  the  OSS  Alexandria,  a  test  of  CCS  MK2  BLK  1 
A/B,  SFMPL,  ATWCS  and  JMCIS  was  conducted.  This  regression 
test  verified  that  the  CCS  MK2  BLK  lA/B  and  the  three 
renovated  Interfacing  systems  performed  correctly  together  in 
a  shipboard  enviroiunent .  Test  results  in  the  form  of  test 
logs  and  presentations  are  still  available  at  NUWC. 

Page  9-2  of  the  29  January  1999  test  report  incorrectly 
shows  these  three  interfaces  as  not  tested.  Page  11-3  of  the 
report  correctly  shows  the  three  interfaces  tested 
satisfactorily  onboard  USS  Alexandria. 

Audit  comment  >4;  Page  9,  paragraph  1,  line  10. 

NAVSEA  completed  a  Y2K  compliance  checklist  that  differed 
substantially  from  the  DoD  Management  Plan  compliance 
checklist , 
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Navy  Response;  Non-concur. 

The  Naval  Sea  Systems  Command  (NAVSEA)  established  Its 
Y2K  Program  Office  In  April  1997.  This  action  coincided  with 
the  release  of  the  DOD  Management  Plan,  which  contained  a  Year 
2000  Compliance  checklist.  Based  on  discussions  with  the  DON 
CIO  Y2K  office,  the  NAVSEA  Y2K  Project  Office  adopted  the  DOD 
Y2K  Guidance  and  the  Air  Force  Y2K  Certification  Sheet  format, 
which  was  provided  as  a  good  example.  NAVSEA  published  Its 
own  NAVSEA  Management  Plan  and  Y2K  guidance  based  on  these 
discussions.  NAVSEA  Activities  were  directed  to  use  the  DOD 
Management  Plan  guidance  and  to  record  the  System 
Certification  on  the  NAVSEA  Certification  sheet. 

The  DON  Action  Plan  stated  "any  DON  Command/Activity 
which  has  adopted  and  Implemented  a  compliance  checklist 
different  from  that  found  in  the  Appendix  C,  should  coordinate 
with  the  DON  CIO 'to  determine  if  the  differences  are 
substantive."  NAVSEA  discussed  this  issue  with  the  DON  CIO 
Y2K  Project  Office  and  received  concurrence  that  the 
differences  are  not  substantial.  The  differences  included 
administrative  system  Information,  planning  dates  which  are 
available  In  the  Navy  y2K  Tracking  System  (NY2KTS),  and  other 
Indirect  or  Internal  date  usage  verification  that  would  be 
Identified  in  the  system  assessment  and  validated  In  the 
system  compliance  testing. 

Recommendation  1;  We  recommend  that  the  Commander,  Naval  Sea 
Systems  Command; 

a.  Re-certify  the  Combat  Control  System  Mark  2  Block  1 

A/B. 

Navy  Response;  Non-Concur. 

As  discussed  in  the  overall  comments  and  In  detailed 
responses,  adequate  documentation  of  the  13-25  January  1997 
300-hour  SDCT  test  and  the  6  April  1997  SORT  test  existed  to 
support  certification  on  31  October  1997  (see  Audit  Comment 
#1) .  This  documentation  was  referred  to  by  Mr.  Frank  Fowler 
when  he  signed  the  certification  form  for  the  Technical 
Direction  Agent  (NOWC) .  The  program  office  signed  the 
certification  based  on  the  technical  expertise  and  Independent 
Verification  and  Validation  (IVsV)  role  of  NDWC. 

Additionally,  briefings  describing  the  results  of  Y2K  testing 
had  been  presented  to  the  program  office  and  to  COMOPTEVFOR, 
and  an  independent  Red  Team  had  reviewed  the  test  results, 
including  Y2K  functionality  (see  Attachment  A) . 
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All  components  of  the  CCS  MK2  BLK  1  A/B,  Including 
hardware  and  software,  were  Included  in  the  January  1997  and 
April  1997  testing  (see  Audit  Comment  #2) . 

At  the  time  of  certification  the  Y2K  problems  identified 
in  three  interfacing  external  systems  had  been  shown  not  to 
prevent  the  CCS  MK2  BLK  1  A/B  from  performing  its  mission  if 
workarounds  were  used  in  the  three  interfacing  systems  (see 
Audit  Comment  #3) . 

The  CCS  MK2  BLK  1  A/B  certification  was  reviewed  on  29 
January  1999  as  required  CNO  message  1317172  JAN  99,  which 
directed  that  a  flag  officer  or  SGS  review/recertify  all 
Mission  Critical  systems.  By  his  review  and  signature  the 
Deputy  Director,  Submarine  Directorate  (an  SES)  upheld  and 
reaffirmed  the  31  October  1997  certification  (see  Attachment 
B)  . 


The  Navy  believes  that  the  Y2K  date  testing  conducted  on 
CCS  MK2  BLK  1  A/B  is  adequate,  and  in  fact  the  DoDXG  report 
states  that  "The  review  by  a  computer  system  engineer  for  the 
Inspector  General,  DoD  determined  that  the  date  testing  on  the 
CCS  MK2  appeared  to  be  adequate".  To  date,  five  submarine 
combat  systems  managed  by  the  same  program  office  and  the  same 
Technical  Direction  Agent  have  been  tested  in  dockside  ship¬ 
wide  Y2K  operational  scenarios,  with  no  y2K  deficiencies 
identified.  Two  of  these  systems,  CCS  MKl  C4.2V2  and  BSY-1, 
were  among  the  nine  systems  included  in  the  roll-up  test 
report  dated  29  January  1999.  BSY-1  has  also  completed  at-sea 
testing  as  part  of  Battle  Group  System  Interoperability  Test 
(BGSIT)  Y2K  testing.  In  addition,  CCS  MK2  BLK  1  A/B  along 
with  renovated  SFMPL,  JMCIS  and  ATWCS  was  successfully  tested 
for  Y2K  compliance  onboard  USS  Alexandria  on  28-29  December 
1998.  No  Y2K  problems  were  identified  in  the  submarine  combat 
system  in  any  of  these  shipboard  tests. 

Additionally,  concurrently  with  this  audit,  three  other 
submarine  combat  systems  (AN/BSY-2,  TRIDENT  CCS  Rev  5.5  and 
TRIDENT  CCS  Rev  6.3)  were  audited  by  DoDIG  to  evaluate  their 
ability  to  operate  in  the  year  2000.  The  systems  were  tested 
for  Y2K  certification  by  the  same  Technical  Direction  Agent, 
operating  under  the  same  Y2K  methodology  administered  by  the 
same  Program  Office  and  TEAM  SUB  NAVSEA  Y2K  managers  as  CCS  MK 
2  BLK  1  A/B.  Draft  DoDIG  audit  reports  for  the  AN/BSY-2  and 
the  TRIDENT  CCS  Rev  5.5  and  Rev  6.3  systems  contained  no 
adverse  findings  or  recommendations  and  concluded  that  "the 
program  manager  followed  the  Navy  certification  process  and 
documented  the  system  verification,  testing,  interfaces, 
implementation  and  contingency  plan." 
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Recommendation  1;  We  recommend  that  the  Commander,  Naval  Sea 
Systems  Command: 

b.  Obtain  all  supporting  documents  to  support  the 
certification. 

Navy  response:  Non-Concur. 

All  supporting  documentation  pertaining  to  the  y2K 
certification  of  the  CCS  MK  2  Block  lA/B  is  available  at  NUWC 
Newport  and  at  NAVSEA.  Logs,  notes  and  other  contemporaneous 
documentation  were  not  provided  during  the  audit  because  the 
issue  of  timing  of  documentation  supporting  the  31  October 
1997  certification  was  not  raised  until  the  6  May  draft 
report.  This  was  after  the  9  March  Exit  Conference  and  after 
the  last  meeting  with  auditors. 

Recommendation  1:  We  recommend  that  the  Commander,  Naval  Sea 
Systems  Command: 

c.  Make  the  documentation  readily  available. 

Navy  Response:  Non-Concur. 

All  supporting  documentation  pertaining  to  the  Y2K 
certification  of  the  CCS  MK  2  Block  lA/B  is  available  at  NUWC 
Newport  and  at  NAVSEA.  Logs,  notes  and  other  contemporaneous 
documentation  was  not  provided  during  the  audit  because  the 
issue  of  timing  of  documentation  supporting  the  31  October 
1997  certification  was  not  raised  until  the  6  May  draft 
report.  This  was  after  the  9  March  Exit  Conference  and  after 
the  last  meeting  with  auditors. 
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CCS  MK2  BIX  1  A/B 
T2K  Cartlfiastlon 
Tiaalln* 


Late  96  Meetings  with  COMOPTEVFOR  established  requirement  and 
plan  to  conduct  Y2K  testing  of  CCS  MK2  BLK  1  A/B, 
SFMPL,  ATWICS,  and  JMCIS,  as  part  of  DT/OT  for  CCS 
MK  2  BLK  1  A/B. 

13-25Jan  97  300-Hour  Endurance  Test  (System  Design 

Certification  Test  (SDCT))  conducted  in  NUHC; 
includes  Y2K  functionality  tests  and  demonstrates 
workarounds  for  JMCIS,  SFMPL,  and  ATWCS. 

10  Feb  97  CCS  MK2  BLK  1  A/B  Operational  Test  Readiness 

Review  briefing  material  prepared  by  NUWC  provided 
to  Program  Manager  -  includes  results  of  Y2K  test. 

6  Apr  97  System  Operability/Reliability  Test  (SORT)  #27 
conducted  in  NOWC;  includes  y2K  functionality 
tests  and  demonstrates  workarounds  for  JMCIS, 

SFMPL,  and  ATWCS. 

16  Apr  97  "CCS  MK2  BLK  1  A/B  Year  2000  Test  Results"  brief 
presented  to  COMOPTEVFOR. 

Apr  97  DOD  Y2K  Management  Plan  Rev  1  issued. 

30  Jun  97  Independent  red  team  review  of  CCS  MK  2  readiness 
for  FOT&E,  including  Y2K  functionality. 

20  Aug  97  COMOPTEVFOR  releases  Follow-on  Operational  Test  and 
Evaluation  (FOT&E)  Report  for  CCS  MK2  BLK  lA/B.  In 
Y2K  results,  p  4-4,  report  describes  workaround 
required  for  the  interfacing  JMCIS  system. 

2  Sep  97  NAVSEA  letter  on  Y2K  cert  policy  issued,  provides 
NAVSEA  Cert  form,  directs  certifications. 

27  Oct  97  Mr.  Fowler  (NOWC  Lead  Test  Director)  signs  CCS  MK2 
BLK  1  A/B  cert  as  NUWC  test  director.  Based  on 
review  of  test  logs,  records  from  Jan  and  Apr 
tests.  Determined  that  all  required  test 
conditions  had  been  conducted  except  31  Dec  2000. 

Mr.  Fowler  personally  tested  31  Dec  2000  date  in 
Oct. 
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31  Oct  97  PM  signs  CCS  MK2  BLK  1  A/B  cert,  based  on  signature 
of  Technical  Direction  Agent  and  his  ovm  on-going 
management  of  development  and  testing  over  the 
past  year. 

6  Nov  98  Roll-up  test  plan  for  nine  systems  signed  by  NUWC. 

26-29Dec  98  Dockside  test  of  CCS  MK2  BLK  lA/B  on  OSS  Alexandria, 
with  renovated  SEMPL,  ATWICS  and  OMCIS.  Results  SAT. 

29  Jan  99  Roll-up  test  report  for  nine  systems  signed  by  NOHC. 

29  Jan  99  FLAG  level  Certification  signed;  based  on 

Certification  forms,  certification  level  forms,  and 
test  report.  R.eaffirms  31  October  1997  certification. 
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xalatlva  to  tha  Yaax  2000  functional  eOR^lianca  In  oux  automated 
infoxmatien  aystana  and  oux  ahlp,  waapona  and  combat  ayatama. 
Refaxanca  la|  incxaaaaa  Navy  amphaala  on  tha  Yaax  2000  pioblam 
and  aata  Navy  Policy  aa  followai  (Summaxixadl 

a.  The  y2K  la  to  be  the  hlghaat  priority  behind  life- 
thraatanlng  and  mlaalen  failure  xapalra. 

b.  '  Y2K  eampllanca  requlraaanta  muat  be  funded}  all 
nonaaaentlal  auatalnmcnt  xaqulxementa  and  ayatema  enhancements 
axe  to  ba  postponed  until  analyata  and  compliance  with  Y2K  are 
inplementad. 

e.  Y2K  fixes  axe  to  ba  deployed  in  ealandax  year  1998  if  at 
all  poaaibla. 

d.  Identification  of  all  ayatama  interfaces  muat  be 
completed  and  antaxad  into  tha  OIST  by  31  Oct  97. 

a.  Status  reports  must  ba  provided  to  tha  DON  CIO  as 
required. 

As  a  xaault  of  tha  above,  increased  reporting  raquirenents  ace 
being  placed  on  claimants,  and  I  aiuat  ask  your  activities  and 
programs  to  expand  the  date  available  on  your  ayatama.  In  the 
past,  X  have  asked  your  support  and  activity's  participation  to 
identify,  all  our  ayatema  and  to  identify  and  track  their  progress 
through  the  several  phases  fxoat  awareneas  through  implementation 
and  completion.  With  their  support,  I  have  peciodieally  reported 
our  progress  during  the  major  claimant  taviaws  with  the  DoN  CIO, 
Dr.  Langston.  Op  to  thia  point  our  database  of  your  systems  has 
been  sufficient  to  keep  track  of  our  scops  and  progress.  Kith 
the  increased  amphasia  on  the  Year  3000  problem,-  both  DoD  and  DoN 
have  shifted  to  the  use  of  the  Defense  Integration  Support  Tool 
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Subj  t  VCMt  2000  COHPOTER  8YSTEHS  CONPEIKHCE 


(th*  DIET)  ta  holt  tha  data  on  all  lyitana  baing  tnekad  fee  the 
Yaat  2000  pioblaa.  Caeloiata  (1)>  foe  axiapla,  llata  tha  22 
functional  aeaa  eitagoeloa  that  aca  now  being  eavlawed  and 
eapoetad  to  hlghae  authoelty.  Encloiuca  (2)  eontalni  tha  y2K 
peogean  phaaaa  and  atatua  eodaa  daflnltlona. 

2.  Although  aany  of  oue  ayataau  aea  tacoedad  In  the  DIET,  thale 
atatua  and  othae  eaqulead  Infocmtlon  la  net  yet  avallabla  thaea. 
in  aome  caaaa  wa  cannot  be  caxtaln  of  tha  aecueaey  of  tha  eueeent 
DIET  data  alnca  It  peadataa  the  Vaae  2000  aaiphaala.  Recently  tha 
diet  eoaplated  an  Inpeovad  data  entry  lyatan  which  paeialta  ua  to 
rapidly  laipceve  oue  data  recording.  In  tha  following  paragraphi, 
I  have  identified  aaveral  waya  for  oue  ayatam  ownaei,  with 
auppoet  of  nv  year  2000  eoordlnatora.  to  identify  and  update  tha 
data  pravlouatV  ptovldad.  'tlB.naad  to  conplata  our  data  entry,  to 
the  DIET  b^El  October  It07./Ha  will  awka  tha  entry  Into  the 
DIET  oentealTy  wrtn  yoUI  lu^ort. 

3.  Dlacuiaiona  during  a  recant  update  to  Dr.  Langaton  pointa  to 

a  naad  for  ayatema  ’‘ownara*  to  adopt  and  cartlfy  a  aat  of  common 
aaaaaamanta  of  thalr  ayatema'  ability  to  function  properly 
through  the  Year  2000  tranaltlon.  Thli  certification  la  included 
In  encloaure  (3) .  - 

4.  Thla  data  call  appliea  to  all  Conmand’ and  PEO'a  tactical, 
bualnaaa,  and  aupport  Eyatama,  The  following  apaciflc  actlona 
Buat  be  taken! 

a.  Eyatam  Certification.  Upon  completion  of  ayatam 
aaaaiaaianta  and  corraetlva  actlona,  all  Cregran  Hanagara  and  hlS 
Eyatam  Nanagara  will  cartlfy,  ualng  the  format  in  aneloaura  (3) , 
that  thalr  ayatema  have  bean  aaaaaaad  and  are  Yaar  2000 
compliant,  (tha  Eyatam  will  not  fall  whan  tha  data  rolla  beyond 
31  Dacambar  1933  and  Into  1  January  2000) .  Prior  to  completion 
of  aaaaaiment  and  eoiraetion,  uaa  tha  phaiei  of  aneloaura  (2)  to 
Identify  the  plannad  actlona  to  anaure  the  ayatam  will  ba 
compliant  and  by  when.  Thla  Information  will  ba  collected  by  the 
RXVSEK  Yaar  2000  coordinator,  Mr.  Robert  Dofner. 

b.  DIET  Reported  Eyatama.  hctlvltlea  that  have  hlraady 
rapoxtad  thalr  Syatema  to  the  Dafenaa  Integration  Support  Tool 
(DIET)  will  aend  the  Eyatama  DIET  Identification  Number  and 
either,  the  ayatam  certification  of  compliance,  (aneloaura  3) ,  ox 
tha  ayatam  atatua  ualng  aneloaura  (2)  phaaaa,  to  tha  NhVSEh  Year 
2000  coordinator. 
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Subjl  YEAR  2000  COMPUTER  SYSTEMS  COMPURMCE 


e.  MRVSEA  H«b  Rsportsd  Systtms.  Aetlvitlss  thst  havs 
conpllad  with  aarllar  guidanea  and  caglatarad  thalr  ayattm  on  tha 
NAV8EX  y2K  Nab  Slta  wlil  faa  eontaetad  to  gathar  tha  additional 
intonation  taquitad  to  eooplata  tha  DIST  sapoctlng  raqulramanta. 
Tha  SEA  04 IT  Y2K  points  Of  contact  idantiflad  in  paragraph  S  will 
update  tha  DIST.  Those  progran  swnagars  Kith  systems  that  are 
compliant  Hill  bs  sskad  to  prapara  and  fotuard  tha  certification 
of  completion  using  tha  format  in  enclosure  (3)«  to  tha  NAVSEA 
Year  2000  coordinator.  -  - 

d.  NAVSEA  Mission  Critical  Programs.  Program  Managers  with 
Systems  listed  in  enclosure  (4|  that  have  not  reported  their 
systems  as  mentioned  above,  must  collect  and  forward  their 
system  information  in  tha  format  of  enclosure  (5)  and,  if  the 
syatem(s|  are  compliant,  a  certification  using  the 
format  in  enclosure  (3)  forwarded  to  tha  NAVSEA  Year  2000 
coordinator. 


S.  The  NAVSEA  Year  2000  points  of  contact  for  this  action  aret 
Nr.  Robert  Dofner,  SEA  04IT2,  (103)  S02-ST3S  (ext. 201) 

(Dofner  RobcrtOHQ.MAVSEA.Navy.Hil)>  PAX  (0144),  or  Ha.  Diane 
Hildy  SEA  04IT2  (103)  S02-SSSS  (ext. 6). 

(Hildy  OianeeHQ.MAVSEOaVy.Hiil 


PETER  P.  BROWN 
Chief  Information  Officer 
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Year  2000  OSD  Flinctional  Areas 

Command  and  Control 

Communications 

Finance 

Environment  Security 
Health  Affairs 
Intelligence 
Logistics 

Science  and  Technology  (Including  Wargaming,  Modeling  and 
simulation) 

Test  and  Evaluation  (Development  Testing  and  Evaluation, 
Operational  Test  and  Evaluation) 

Weapon  Systems 

Military  Personnel  and  Readiness 

Nuclear,  Chemical  and  Biological  (NCB) 

Procurement/Contract  Administration 

Reserve  Affairs 

Civilian  Personnel 

Information  Management 

Space 

Transportation 

Meteorology 

Systems  Acquisition  Management 
Industrial  Affairs  and  Installations 
Training 
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Y2K  Compliance  Phases  and  Codes 
Y2K  Program  Compliance  Phases: 

•  "Awareness"  -  The  process  of  educating  and  maintaining 
visibility  about  the  Year  2000  date  processing  problem. 

•  "Assessment"  -  The  process  of  identifying  costs  and 
preparing  plans  to  solve  the  problem. 

•  "Renovation"  -  The  process  of  solving  the  problems. 

•  "Validation"  -  The  process  of  testing  and  verifying  the 

solution  work  and  system  is  compliant. 

•  "Implementation"  -  The  process  of  fielding  the  solution 
for  operational  use. 

•  "Completed"  -  The  period  when  all  “Systems"  have  finished 
the  deployment  of  the  corrected  version  of  the  system. 

Y2K  Program  Problem  Status  Codes: 

A  =  assessment  complete;  no  known  problem  with  year  2000 
B  «  known  problem;  fix  already  in  place 

C  =  known  problem;  fix  in  next  release 

D  »  known  problem;  fix  under  development 
E  =  known  problem;  will  fix  before  year  2000 
F  >  known  problem;  fix  dependent  on  tools  (software 
engineering  environment) 

G  »  known  problem;  fix  dependent  on  COTS  (hardware  or 
software) upgrade 
H  “  known  problem;  will  not  fix 

I  =  system  to  be  terminated  before  fiscal  year  2000 
J  =  assessment  not  completed 
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NAVSEA  Y2K  System  Certification  Format 


1.  Systera/Subsystem!  _ 

2.  DIST  Identification  Number:  _ 

3.  The  Subject  System  (s)  has  the  following  characteristics; 

VERIFIED  N/A  ACCEPTABLE 

a.  Accurately  process  dates  in  the  1900’s  _  _  _ 

b.  Accurately  process  dates  in  the  2000' s  _  _  _ 

c.  Accurately  process  dates  between  1900' s 

and  2000'a  _ 

d.  Crosses  from  1999  to  2000  successfully  ____ 

e.  Recognizes  29  Feb  00  as  a  valid  date  _  _  _ 

f.  Recognizes  Julian  date  00060  as  29  Feb  00  _  _  _ 

g.  Recognizes  Julian  date  00366  as  31  Dec  00 _ _  _ 

h.  Arithmetic  operations  recognize  year  2000 

has  366  days  _  _  _ 

i.  Each  Interface  that  exchange  data  has  been 
reviewed  corrected  if  necessary,  and 
verified  to  work  for  date  data  passed 
between  systems 

j .  Support  equipment  and  test  equipment  have 
been  verified  to  work  for  date  data  passed 
between  systems 

4.  Certification; 

_  I  certify  the  systems (s)  meets  all  Y2K  operating  criteria  or 

has  acceptable  operational  workarounds  as  indicated  above. 

I  certify  I  have  no  system(s)  effected  by  the  Y2K  problem  as  indicated 
_  above. 


(date) 

(System  Manager,  Central  Design 
Agency  Commander,  Directorate  or 
equivalent  designated  staff) 


(date) 

Customer  or  User  Requirement 
Approval  Official,  User, 
Operator,  or  Representative 
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NCHORAMIKM 


DEPARTMENT  OF  THE  NAVY 
mniwiKnicwwowKmKmilMM 


$000 

S*I  TsaB/020 
U  J«n  99 


rcoa;  Deputy  Cowuniler  for  Suteatinuu 

Pzo«r*a  EMCUtlv*  OKleu,  Outaurln** 

To:  SEA  OOiy 

Subj  t  MAVy  yEAK  2000  (NY2X)  CEATIITCATION  SXGMATUAE 
«•(:  («)  CHO  HSS  131T17Z  JAM  99 

1.  Aofotonco  («)  iMuod  policy  zoqulxlng  My2K  flsg  or  SES 
eoctlOleetleii  of  *11  Mloolen  Critleel  ayotrao.  Tom  Sutaatlno 
has  4«  Hlatlen  Critical  ayataaa  in  tha  Navy  y2K  databasa.  All  44 
have  bean  y2K  cartlfiad.  Llatad  below  are  tha  final 
certification  lavala  and  cartification  dataa  for  thaaa  ayatau. 


MY2XTS 


Syst«n 

Certification 

Cnrtiflcntion 

ZO  No. 

Syataa  Haiu 

Uvel 

Dntn 

i41.0 

AN/EQM-17  DERM  SQUHOER 

S 

2fi-Hev>B7 

1424 

RADIO  DIRECTION  riHOER 
SET(AH/BRO>7l 

S 

8-$np*BB 

«42« 

AN/BSy-1  COMBAT 
COMTROL/ACOUSTIC  C4.2V2A 

In 

23-Dne-9B 

•42« 

AM/BSy-1  COMBAT 
CONTROl/ACOUSTIC  C4.2V2 

In 

31-0ct-B7 

1430 

AN/BSY«2  BUBHARINE  COMBAT 
SYSTtM 

lb 

2-Dte-98 

1471 

SZLENT  KNZOHT  (ANmQ-4  (V)  1) 

2n 

l-Stp-98 

1473 

HZCH  BBOBABZLZTY  or 

ZNTCRCCPT (HPZ) AECCZVCR 
<AN/«LR-IA1 

2b 

2*Snp>9e 

•  474 

ELECTRONZe  COUNTCRHCASURE 
RECEZVING  SET  tAM/NLR>l(V|5| 

S 

2-S«p~9B 

•  SOS 

RADIO  OIRCCTIOM  rZNOER  SET 
(AN/BRD^78) 

2b 

2-5np'9B 

•  S14 

COMBAT  CONTROL  SYSTEM  HK2 
CCT6R3 

lb 

24-8np-9B 

•S17 

COMBAT  CONTROL  SYSTEM  HK2 
BLOCK  ZA/B 

lb 

31-Oct-97 

IS19 

COMBAT  CONTROL  SYSTEM  HX2 
CCPER2 

lb 

31-Oct-97 
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aubji  l»VY  VCAR  2000  |Ny2X)  CCRTiriCKTIOH  SIGHXTORE 


1520  CCS  MBV  S.S 
1522  CCS  REV  0.3 
1542  MI/NI,a>4  (V)  SU  MVMrH 
5134  M/NtH-lH 

5191  COMBAT  CONTROl  SYSTEM  HKl 

C4.2V2 

5201  TYPE  2r  PERISCOPE 
5299  RM/BSY>1  ACOUSTIC  SET 
5991  CLECTROHIC  COODTERMSASURE 

RECEIVIns  SET  (AM/MtR-9(V)2) 
5504  TYPE  19B  PERISCOPE 
5555  TYPE  ISO  PERISCOPE 
10002  TYPE  ISM  MOO  1  PERISCOPE 
10031  or  ANTENNA  AN/REA-4 
11395  riRE  CONTROL  SYSTEM  MX  111 
C4.1V1 

11397  COMBAT  CONTROL  SYSTEM  HKl 
C4.1V2 

11399  MK  113  MOO  9  TIRE  CONTROL 
SYSTEM  (PCS) 

11460  RADIO  DIRECTION  PINDER  SET 
(AN/8RD-1A) 

11461  AM/BSY-1  COMBAT 
CONTROL/ACOOSTIC  C4.2V1A 

12126  AM/BaR-21  OICITAL  HOLTI  BEAM 
SONAR 

12921  AN/B0S-4E  SONAR  SET 
12947  TYPE  2D  PERISCOPE 
129S3  TYPE  SB  MOO  3  PERISCOPE 
12956  TYPE  9<I  HOD  3  PERISCOPE 
13004  AN/BgQ-SB(V)3  SONAR  SYSTEM 
13034  AN/BOQ-SO  SONAR  SYSTEM 
13036  AM/BQa-SC(V)  SONAR  SYSTEM 
13207  DATA  DISTRIBUTION  SYSTEM 
13210  SHIP  CONTROL  SYSTEM 
13226  AN/UQN-1  SOUNOINS  SET 
13235  AN/NSQ-7  NOISE  VIBRATION 
MONITORING  SYSTEM 
13295  CIRCUIT  0 
13319  SEAMOLP  NEAPONS  LAUNCH 
CONSOLE  (NLC) 

13495  AN/BQQ-SB  SONAR  SYSTEM 


la 

la 

3a 

2a 

lb 

5 

la 

5 

5 

5 

2a 

5 

lb 

lb 

lb 

5 

la 

5 

5 

S 

5 

5 

la 

5 

5 

5 

2a 

5 

la 

5 

5 

5 


16-5tp-5S 
lf-Sap-59 
2-Sap-59 
2-Sap-55 
31 -Oct-97 

2-Sap-99 

19- May-9B 
2-Sap-99 

2-Stp-9l 

2-Stp-t9 

l-Stp-91 

lS-Sap-9t 

6-Oct-99 

31-Jul-99 

20- Aug-99 

1- Sap-9S 

6- Oct-99 
31-Aug-9S 

31-Aug-99 

2- Sap-99 
2-Sap-st 
l-3ap-99 
26-H9V-91 
26-HOV-97 

26- NOT-97 

7- JU1-99 

27- Oct-99 
31-Aug-99 
14-Apc-99 

26-Aug-99 

9-Oct-99 

2E-Nav-97 
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BIOTWIIJlWIUUUOOWOWWIOTOiro 
D-aiietAUimfr— DHdMiinto-o 

aiiinogauuniratxmitnwoi)OT<n^ 

■TTUiytM  MiHMVMlio  ei]iio»-aavtt— tousu. 

xiiii  mraut) 

K  unlit  MM  M  tn  HD  »I110«li25 
iH  cm  KMHnnTM  eez/nmK// 

to  MUnM/OGMWVAIMTICOH  MTUUKT  »IVW  MD//OOZI.DT// 
kUUMCt/COMNtVOOWClOOM  HMIIIIKTOII  tCimitill 

nacaoi/caHiMntunk  m  ohumi  u/ZM/Z 
uium/eoMmvKuuoaM  NMimeTcit  oczzto/otirzz 
IKIUllMXZOOMNtVtaMVIOaM  HECUMlCtlOIIG  tAZZOOZMZZ 
kimDMezeewrAMMjiiieoH  UM  oiiso  aJimimit 
i.atoca>ze(MikVimcieQN  omuhiii  wmil 
tDCCnrZCaMHAVIIlLlCOM  MIUUOnH  tHZZOSZUZZ 

koUMsczotwac  MuaiiiETON  oe  zzoozz 
■tucnotzcMCT  mucoiA  nzzoozz 

kuecruzooMixvHROcooN  timn  t»»ct  ezinu  MZZMzanziutzz 
KULskCLZiwreuy  msHiHaTOM  oczzoozz 
liuurKizrcMsiiiLn  nman  uvu  MszzDtzz 

kUUmOZnxtCMrMIOUAV  lATUXtHT  MVtk  MSZOOZZ 
kaurArzrcotkCkik  kATimun  kivzk  leZZMZZ 
kUCAOirZtIkm  AAA  MAkklliSTOM  KII133II 
kUUDSA/DIkMk  HAIMIMSKW  DC/ZJMZZ 
INFO  kUtMAAAZIMlCOUV  MAlllIHIiTOM  KZZAAOSMZZ 
kASI  02  kUCMAAAlUO  UKCtAt 

k'juuAA/eMO  KAiiiNsiai  KintxnamtimtmiwiiMimn/ 
NOOlZMOISZkOiCZZ 

kUCMAAA/OOM  CIO  MAlkUKTOM  DCZZMOSOIZZ 
AUtACMCZCMC  MAJklMSTM  OC  ZZC4IZCIOZLFZ/ 

kUCtci.rzciHctAMin.T  noknuc  vazzooznczmiozz 

kHHMIlAIlZeillCrACIlT  flAAL  HlkkOk  IUZZOOZMtZlt((/Z 
kkOLCIIt/CIKCOfKAVtga  IOMDOH  OkZZOOZIMZNiZMIZZ 

k-xokAM/eoMiiAVMneui  Mokrout  vazzmjzz 

lUMDHClI/COMaAVAIklUACttMtllOtV  etUXA  LAkS  CAZZ222/Z 
AOUaCAZaik  AkUHOTON  VAZZOOZZ 
kHNOHC/HAVAIkkAkCOiniASVtOtV  CAtAlIM  FAZZOO 
kOUAM/HAA  tUSHtIteitM  M/ZJJ2ZZ 
kUllIttllSZDlAMAVCklNIKtfAUV  MASKIHSTOM  DCZZOOZZ 

kimnr/kAVAviiDaoi  mckaoiiviau  mmu 
kkrzjkrzHAVAVHwrat  oacmomviaax  tuteon 
kWrADFZMAVAVIIOEror  NCkTk  ISAAHO  CkZZOOZZ 
kUCkroAZNAVkVWDUOt  CHCMT  tt  MC  ZZMZZ 
BT 

UMCUS  ZZH02000ZZ 

HS&IDZSCHAimtN/CMa  YBXZZ 

OASC  0}  kUEHAAAIllO  CACLAS 

BUBJZMUK  CtkTlnCATlOH  (ICMAIUkl  kOAICtZZ 

kErZAZMAGZDON  CXO/n2230t0tCSIZZ 

WWAtr  A  II  tkt  0011  «0  HISJASE  OISCOS5INB  FI  t>  000  AmOFMATIONS 
ACT  V2*  COMFAIAMCt  etAItriCAtlOK  AESOlkMEHTS/Z 

fOC/rkAWHFEADCk/AIkOA/CIIO-yiMZMASAXMCIOM  DC/TEAl  DAM  932>3120ZTEA! 

kmzl.^  kEF  A^FA^UlAltl  IKE  PtlWk  AFFADFAIAIIW  ACT  kEOUIAEHEMT 
TEAT  OATE-kEAATEO  DATA  IkOCESAtMG  CAFAB2AITXEA  OF  AHY  XMFOAMATXOH 
TECHMOAOGT  Ok  MATXOMAL  ktCUAXTY  ATATEM  OF  THE  OEFAklMEOT  OF  DEFEMAE 
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(torn  NXMIOM  CMTICU.  MO  MXMtOII  SOrfOOT  iYOTIMi)  MOST  MCT 
CtOTinClkTXOII  ilVBL  U,  &0«  OR  3  tM  TltK  MRlt  1»I3  ODD  ttU  20D0 
MUMOOSMt  KM.  T«t  NUMfiK  HOVISBi  ROOtnOMM.  lOLXCt  RCOMOIM 
tXCMRTVRB  CUTXnCRfXOM  MQOXRPCim  fOR  MtttXOM  CRtfXCM.  RYRTDU 
OHLY. 

3.  TMC  ttM  2000  OOMtURMCV  MD  ICVCL  Of  CSRtXnCRTXOli  OT  M4> 

NtlRXOM  CRXTZCRL  tVTBIt  (M  Utm  XM  TRC  MVOm)  MOOT  IB  CBRTIRU) 

BY  k  KM  OmCCRt  COIKRM.  aiTXCBR<  OR  iU  XM  TXB  PROSRM  HMMSBRTS 

auxM  or  ooMONo.  tr  fu  orogrm  mmrocr  u  k  ruo  omot  or  iu« 
m  cBRTxrzanoR  via  icn  nxi  RcootUMorr. 

3.  JOL  OttMMDI  OCVCLOOlHa  MO  nCLDIMS  HttttM  OUftOX.  BYBTOtt 
YACB  04  ROMMRIISO 

IHOULD  XNILSm  TRIB  ROLXCV  tmUXIRLY  MO  REfORT  COHfLRXON  Of 
riM  um  CCRTXnCRTIQIf  IXOHRTOlU  fOR  Aa  MSVXOOfLY  CSRTXrXCD 
lYSTIMS  10  YU  CMS  MCY3K  riOJBCt  OmCC  M  CQNKXTCO  MD.  XM  MY 
BVCRY.  tlLT  1  m  MfORYt  MAY  1C  BY  MUSACB  OR  XHtAILl 

ASHMOOMSrAHAR.MAYr.NXL.  00  ROT  CBMQC  TAB  STA10B  OT  AMY  SYBTtM 
•Homt  AB  coNruti  XM  IMS  ByaicTs  dataram  ar  iaat  or  mxb  crroRT 
UHLRSS  nc  KM  I£Va  RBVIOt  AUOLTA  Xtt  TM  BYBttM  BCXMO 
KTEAMXMCD  NOT  10  RAVB  BUM  rB0r»t,Y  CCATXriEO.  fUTUM  RCPORTB 
or  OOMPUtTOM  OP  VAtXUTIOM  IlUa  ROT  BC  IMmSD  XIRO  TOE  NY2KTB 
OATABASB  RZYHOUT  flM  OmCER/CCIItUA  OITZCEA/BU  CCATXnCATXOM 
SXGHATOAU. 

4.  THE  MY2t(1B  ORTABASC  IB  UtNQ  MOOtTICO  10  ACCONNOOATC  DOCtMEUTXKS 
PXAQ  Z.EVa  CBRTZneATIOM  tOR  MtSttOM  CMfZCAL  BYBTtMI.  60IDARCE  OR 
BOM  TO  00  tlXB  MXa  U  PMVXOGO  10  AU  YM  COOADZUATOAS  HHCH  THIS 
NOOirXCATtOM  IB  OOMPUTS.// 

BT 

IlUO 

MMNII 

00  ....ACT  fOR  COMHAVCBASYBCaM 

QM  OOZ  OPT  114  PHtBia  PMlOIIP  IMSSTtU  PMSXmi  IMS)1IC2  PHIBIBAI 
IMS3I1C  PMS31X  OK  03K  04H1  04H4  OOITIR  OOITl  00  fiSA 
OSC  04  OIKU  I1K4B  BIQ  PKSXOO  tSttSZSC  PMSXIS 
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Audit  Team  Members 
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Thomas  F.  Gimble 
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Mary  Lu  Ugone 
Kathryn  M.  Truex 
Virginia  G.  Rogers 
Scott  S.  Brittingham 
Amy  L.  Schultz 
Dan  B.  Convis 
Peter  C.  Johnson 
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